From 88ad42f0f19ad73c7274ce7b5eb4375dccc968d7 Mon Sep 17 00:00:00 2001
From: Josh Brickner <josh@macinjo.sh>
Date: Sun, 12 Nov 2023 21:28:13 -0700
Subject: [PATCH] More RSS escaping

---
 templates/rss.xml.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/rss.xml.php b/templates/rss.xml.php
index 36afb63..a505462 100755
--- a/templates/rss.xml.php
+++ b/templates/rss.xml.php
@@ -2,7 +2,7 @@
 <rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:podcast="https://podcastindex.org/namespace/1.0">
   <channel>
     <title><?= $feed['name'] ?></title>
-    <description><?= $feed['description'] ?></description>
+    <description><?= htmlentities(strip_tags($feed['description'])) ?></description>
     <itunes:image href="<?= $host ?>/image?feed_id=<?= $feed['id'] ?>" />
     <language>en-us</language>
     <generator>podsumer</generator>
@@ -13,7 +13,7 @@
     <? foreach($items as $item): ?>
     <item>
       <title><?= $item['name'] ?></title>
-      <description><?= strip_tags($item['description']) ?></description>
+      <description><?= htmlentities(strip_tags($item['description'])) ?></description>
       <pubDate><?= $item['published'] ?></pubDate>
       <enclosure url="<?= $host ?>/media?item_id=<?= $item['id'] ?>" type="audio/mp3" length="<?= $item['size'] ?>"/>
       <link><?= $host ?>/item?item_id=<?= $item['id'] ?></link>